
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
File: P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json)
Hash identifier: joZRZ2YXDylQY5gpCL7C8VieYCZrIxN+HOFBki6KKY0=
Subject key identifier: 0E:3A:D7:C8:88:DE:C6:D3:89:8F:B1:FC:70:B4:C3:D8:74:DB:57:CD
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial: 03B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
Manifest number: 03A1
Signing time: Mon 27 Jul 2026 01:50:12 +0000
Manifest this update: Mon 27 Jul 2026 01:50:12 +0000
Manifest next update: Mon 03 Aug 2026 01:50:12 +0000
Files and hashes: 1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: qsc1lhXeVPZsfMD6CqmpQ4q3qE6Dk8xDNM76zNhytaI=)
2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: QouBh/SopzzJHOsamAAlSJS8qKQU7cprqb1IggD1INw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Validity
Not Before: Jul 27 01:50:12 2026 GMT
Not After : Aug 3 01:50:12 2026 GMT
Subject: CN=6a66b954-2e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:11:15:03:f9:be:e1:51:59:79:f3:10:98:
bd:e4:31:92:ee:5b:9c:5f:d9:51:6c:b2:e6:87:be:
03:03:ea:f2:66:26:49:11:e8:63:59:b9:f9:72:4f:
21:36:c2:a7:47:1f:88:d4:79:e3:91:75:84:71:18:
32:2f:5c:95:cf:86:8f:3e:5b:ad:16:f0:05:20:84:
c9:5c:be:48:bc:be:a4:da:45:c9:09:13:a2:89:8f:
10:33:8d:71:b2:a4:ed:de:5e:07:42:d0:21:eb:ca:
64:51:a3:0b:0f:ea:51:d1:f8:ca:bd:27:54:77:a1:
90:53:1f:f7:08:77:fa:de:fe:5f:dc:49:14:b1:65:
4f:1e:7e:e6:3c:3f:23:81:52:ca:86:b9:be:20:09:
fb:53:ac:40:90:38:46:e9:b0:21:1d:0a:32:63:a1:
28:bb:a8:8d:f4:45:75:6d:b1:fb:05:c0:ba:e0:f1:
a6:fb:ae:65:03:f5:1c:42:ed:23:31:76:db:c3:22:
93:9e:a4:5a:17:5c:e3:d0:ac:a3:db:ba:b7:2d:3e:
fa:91:ae:a6:90:81:59:33:f7:ac:d5:58:d3:01:c2:
34:4b:2b:99:7f:ba:2a:5e:8c:6a:9c:8f:d6:f9:d8:
77:88:fd:97:9e:32:1f:da:25:b5:b9:1f:13:82:e8:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:D7:C8:88:DE:C6:D3:89:8F:B1:FC:70:B4:C3:D8:74:DB:57:CD
X509v3 Authority Key Identifier:
keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:25:08:e8:07:16:7b:00:e3:8e:0c:7a:c8:83:94:94:c5:10:
a3:cf:79:72:1c:91:a6:cb:19:53:df:90:2e:3a:32:6e:b3:3a:
48:05:9f:12:95:9d:86:9d:c3:1f:e2:43:5c:e1:c8:d3:a0:59:
aa:38:b7:49:c5:89:0f:40:a3:52:5f:84:90:19:d7:86:5c:c4:
00:46:f7:d1:11:10:f4:75:e0:ec:ac:ff:4b:41:7f:ff:37:69:
3c:e8:8f:e1:0e:61:06:aa:c9:5e:be:99:d5:20:f4:7d:61:81:
3e:a2:c2:50:9c:59:91:25:1c:01:0d:55:c3:98:77:6c:42:7f:
35:46:01:d2:e1:86:b7:ef:da:37:ba:3d:24:e8:74:94:f4:31:
ce:5d:a5:ef:2a:6b:c4:59:85:0e:85:02:51:24:95:78:94:69:
58:64:10:9c:63:93:0d:7c:72:6a:8a:a3:fe:31:9f:5a:8f:4b:
43:ee:c9:a4:c9:f2:c8:85:99:4b:16:62:ec:94:18:44:c9:29:
fd:b6:dd:c0:45:3b:31:ab:f0:84:b4:dd:61:bd:40:fd:45:42:
14:91:5a:6d:33:9d:6f:00:00:f3:92:f8:1f:9f:5d:f9:7f:0d:
59:f4:73:c9:15:0b:11:d4:8b:4b:a5:31:20:bc:d4:3f:ee:0b:
5d:f4:3c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:48 2026 by rpki-client